last executing test programs: 40.195884408s ago: executing program 1 (id=3187): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=@newtaction={0x5c, 0x30, 0x0, 0x0, 0x0, {}, [{0x48, 0x1, [@m_skbedit={0x44, 0x0, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x8, 0x6, "3564489b"}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 40.048867809s ago: executing program 1 (id=3189): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xf, 0x80282) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, 0x0) 39.834085679s ago: executing program 1 (id=3190): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 38.843754694s ago: executing program 1 (id=3191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') 38.660905565s ago: executing program 1 (id=3193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 18.77226666s ago: executing program 1 (id=3195): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r2, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x54, 0x1, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4841}, 0x8000) read$alg(r2, &(0x7f0000000300)=""/99, 0x63) 8.782536718s ago: executing program 0 (id=3294): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1}, 0x18) sendmmsg(r1, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)="bd9593e9b985b0f3", 0x8}], 0x1, &(0x7f0000001700)=ANY=[], 0x2d0}}], 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.31560737s ago: executing program 0 (id=3300): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0xfe, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x10}}, 0x20000000) 6.123617151s ago: executing program 0 (id=3303): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) shutdown(r0, 0x0) 6.043913852s ago: executing program 0 (id=3304): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) 5.377128814s ago: executing program 4 (id=3306): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x0, 0x0, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x1000, 0xc, 0xfffffffe, 0x1]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@broadcast, 0x659}, {@broadcast, 0x7fffffff}, {@empty}, {@multicast1, 0xffd200}, {@multicast1, 0x7}]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.066961216s ago: executing program 2 (id=3307): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r2, 0x1, 0x1}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) dup(r3) fcntl$dupfd(r0, 0x0, r3) syz_open_procfs(0x0, &(0x7f0000001180)='net/ip6_mr_cache\x00') syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r9, 0xc004510e, &(0x7f0000000800)=0xffffffff) 4.030931351s ago: executing program 2 (id=3310): syz_io_uring_setup(0x1373, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1]) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) r4 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r0, 0x1000000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xa50f}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r6, 0x541b, &(0x7f0000000180)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x0, 'pimreg\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x60900, 0x0) 3.875198042s ago: executing program 4 (id=3312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.026594726s ago: executing program 32 (id=3195): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r2, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x54, 0x1, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4841}, 0x8000) read$alg(r2, &(0x7f0000000300)=""/99, 0x63) 3.003868256s ago: executing program 2 (id=3314): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) shutdown(r0, 0x0) 2.940556206s ago: executing program 3 (id=3315): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5885}, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.855602337s ago: executing program 2 (id=3316): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f00000003c0)={0x40000000}) 2.854980137s ago: executing program 4 (id=3317): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = open(0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) 2.690303167s ago: executing program 3 (id=3318): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_io_uring_setup(0xd, &(0x7f0000000140), 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x3, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000480)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000040)={0x5, 0x1}) 2.689749837s ago: executing program 4 (id=3319): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.379181999s ago: executing program 4 (id=3320): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r2, 0x1, 0x1}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) dup(r3) fcntl$dupfd(r0, 0x0, r3) syz_open_procfs(0x0, &(0x7f0000001180)='net/ip6_mr_cache\x00') syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r9, 0xc004510e, &(0x7f0000000800)=0xffffffff) 1.568718353s ago: executing program 2 (id=3321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000440)='nilfs2\x00', 0x10000, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f00000000c0), 0xd5, 0xb00) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000480)) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r7, 0x5403) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40186f40, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x101002, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000180)) sendfile(r2, r1, &(0x7f0000000480)=0xe0000000, 0x401) 1.566836443s ago: executing program 3 (id=3322): r0 = socket(0xa, 0x1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) 977.869506ms ago: executing program 3 (id=3323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') 976.403366ms ago: executing program 0 (id=3324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1}, 0x18) sendmmsg(r1, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)="bd9593e9b985b0f3", 0x8}], 0x1, &(0x7f0000001700)=ANY=[], 0x2d0}}], 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 899.335616ms ago: executing program 3 (id=3325): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) shutdown(r0, 0x0) 810.500386ms ago: executing program 3 (id=3326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 713.379837ms ago: executing program 4 (id=3327): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4008010, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 666.960367ms ago: executing program 2 (id=3328): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=3329): syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[], 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000240)=[{}], 0x20) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 265.618131][ T8868] netlink: 'syz.2.1938': attribute type 2 has an invalid length. [ 265.654025][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1938'. [ 266.355116][ T8894] device syzkaller0 entered promiscuous mode [ 268.544772][ T8912] netlink: 'syz.0.1954': attribute type 2 has an invalid length. [ 268.552712][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'. [ 270.506340][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1971'. [ 270.530972][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1971'. [ 270.713206][ T8961] netlink: 'syz.0.1973': attribute type 2 has an invalid length. [ 270.721278][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'. [ 270.878329][ T8969] device syzkaller0 entered promiscuous mode [ 272.795204][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1985'. [ 272.810143][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1985'. [ 272.983331][ T9005] netlink: 'syz.4.1988': attribute type 2 has an invalid length. [ 272.991137][ T9005] netlink: 'syz.4.1988': attribute type 6 has an invalid length. [ 273.506868][ T9033] device syzkaller0 entered promiscuous mode [ 273.534832][ T9037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2000'. [ 273.546350][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 275.799658][ T9053] netlink: 'syz.2.2003': attribute type 2 has an invalid length. [ 275.808625][ T9053] netlink: 'syz.2.2003': attribute type 6 has an invalid length. [ 276.321062][ T9112] netlink: 'syz.2.2023': attribute type 2 has an invalid length. [ 276.336492][ T9112] netlink: 'syz.2.2023': attribute type 6 has an invalid length. [ 276.350690][ T9113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2025'. [ 276.540205][ T9115] device syzkaller0 entered promiscuous mode [ 276.638644][ T9127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2031'. [ 276.961920][ T4300] hid-generic 0005:15C2:0400.0001: item fetching failed at offset 0/1 [ 276.979526][ T4300] hid-generic: probe of 0005:15C2:0400.0001 failed with error -22 [ 277.328715][ T9157] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2045'. [ 277.482459][ T9163] Driver unsupported XDP return value 0 on prog (id 487) dev N/A, expect packet loss! [ 278.867998][ T9186] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2058'. [ 279.127913][ T9145] netlink: 'syz.0.2038': attribute type 2 has an invalid length. [ 279.147911][ T9145] netlink: 'syz.0.2038': attribute type 6 has an invalid length. [ 279.958386][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2070'. [ 281.218466][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'. [ 281.232090][ T9214] device syz_tun entered promiscuous mode [ 281.238222][ T9214] device macvtap1 entered promiscuous mode [ 281.249690][ T9216] device syz_tun left promiscuous mode [ 281.269098][ T9228] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 281.283474][ T9228] netlink: 'syz.4.2074': attribute type 6 has an invalid length. [ 281.315893][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2073'. [ 281.577468][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'. [ 281.585332][ T9237] device syzkaller0 entered promiscuous mode [ 283.521184][ T9264] netlink: 'syz.4.2088': attribute type 2 has an invalid length. [ 283.529230][ T9264] netlink: 'syz.4.2088': attribute type 6 has an invalid length. [ 283.537309][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2090'. [ 283.747734][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2094'. [ 285.646139][ T9300] netlink: 'syz.4.2102': attribute type 2 has an invalid length. [ 285.657931][ T9300] netlink: 'syz.4.2102': attribute type 6 has an invalid length. [ 285.680013][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2103'. [ 285.825918][ T9306] device syzkaller0 entered promiscuous mode [ 287.972424][ T9341] netlink: 'syz.2.2119': attribute type 2 has an invalid length. [ 287.980646][ T9341] netlink: 'syz.2.2119': attribute type 6 has an invalid length. [ 288.028762][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 289.963397][ T9370] netlink: 'syz.4.2132': attribute type 2 has an invalid length. [ 289.975413][ T9370] netlink: 'syz.4.2132': attribute type 6 has an invalid length. [ 289.985070][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 290.490980][ T9393] device syzkaller0 entered promiscuous mode [ 290.563241][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2146'. [ 291.036943][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2154'. [ 292.536245][ T9405] device syzkaller0 entered promiscuous mode [ 294.031096][ T9440] netlink: 'syz.3.2159': attribute type 39 has an invalid length. [ 295.505607][ T9442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2160'. [ 295.514875][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'. [ 295.737333][ T9452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2165'. [ 296.175479][ T9472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2173'. [ 296.197847][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2173'. [ 296.265731][ T9475] netlink: 'syz.4.2175': attribute type 39 has an invalid length. [ 296.626890][ T9482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2178'. [ 297.024774][ T9503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2186'. [ 297.053624][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 299.254590][ T9533] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2199'. [ 299.736962][ T9582] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2220'. [ 301.823703][ T9613] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2234'. [ 302.008617][ T9627] netlink: 'syz.3.2239': attribute type 39 has an invalid length. [ 302.025568][ T9630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2240'. [ 302.481796][ T9651] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2250'. [ 302.663455][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2253'. [ 302.747278][ T9663] netlink: 'syz.0.2255': attribute type 39 has an invalid length. [ 303.021860][ T9678] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2263'. [ 303.347643][ T9696] netlink: 'syz.4.2269': attribute type 39 has an invalid length. [ 303.726230][ T9711] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2277'. [ 304.209377][ T9727] netlink: 'syz.0.2283': attribute type 39 has an invalid length. [ 304.411758][ T9739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2289'. [ 304.427269][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'. [ 304.751763][ T9758] netlink: 'syz.1.2297': attribute type 39 has an invalid length. [ 305.066022][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2304'. [ 305.080789][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'. [ 305.462012][ T9786] netlink: 'syz.0.2310': attribute type 39 has an invalid length. [ 306.138715][ T9824] netlink: 'syz.0.2326': attribute type 39 has an invalid length. [ 307.070280][ T9859] __nla_validate_parse: 7 callbacks suppressed [ 307.070305][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2340'. [ 307.112079][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2340'. [ 307.134344][ T9863] netlink: 'syz.2.2342': attribute type 39 has an invalid length. [ 307.228596][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2344'. [ 307.279817][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 307.623146][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 307.654504][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2355'. [ 307.687713][ T9898] netlink: 'syz.1.2357': attribute type 39 has an invalid length. [ 307.947103][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2361'. [ 307.953805][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'. [ 309.711516][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2369'. [ 309.741211][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2369'. [ 309.767261][ T9934] netlink: 'syz.1.2372': attribute type 39 has an invalid length. [ 312.382176][T10000] __nla_validate_parse: 4 callbacks suppressed [ 312.382198][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 312.410911][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 312.472473][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2401'. [ 312.699936][T10023] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 314.798948][T10038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2415'. [ 314.822482][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2415'. [ 315.423006][T10089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2435'. [ 315.438985][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 316.079999][T10119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2446'. [ 316.119824][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2446'. [ 316.432747][T10139] netlink: 'syz.4.2453': attribute type 2 has an invalid length. [ 316.441427][T10139] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2453'. [ 317.045950][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.052623][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.737563][T10188] __nla_validate_parse: 2 callbacks suppressed [ 317.737585][T10188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2472'. [ 317.790612][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 318.002021][T10202] ======================================================= [ 318.002021][T10202] WARNING: The mand mount option has been deprecated and [ 318.002021][T10202] and is ignored by this kernel. Remove the mand [ 318.002021][T10202] option from the mount to silence this warning. [ 318.002021][T10202] ======================================================= [ 318.081151][T10202] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 318.540230][T10222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2487'. [ 318.554198][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2487'. [ 319.178560][T10238] syz.2.2493 sent an empty control message without MSG_MORE. [ 319.258986][T10256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2501'. [ 320.130641][T10285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2513'. [ 321.918304][T10323] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2529'. [ 323.775251][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2544'. [ 324.720964][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2559'. [ 326.288008][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2570'. [ 329.511723][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2582'. [ 329.527458][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 330.052316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 330.459110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 330.561417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 330.572281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 330.580612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 330.588907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 330.597214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 330.605502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 330.613789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 330.622059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 330.836794][T10481] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 330.843646][T10481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 330.869070][T10484] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 330.875655][T10484] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 330.896056][T10484] vhci_hcd vhci_hcd.0: Device attached [ 330.903860][T10481] vhci_hcd vhci_hcd.0: Device attached [ 330.978165][T10481] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 330.984716][T10481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 330.992102][T10484] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(12) [ 330.998711][T10484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 331.006266][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.006364][T10481] vhci_hcd vhci_hcd.0: Device attached [ 331.039873][T10484] vhci_hcd vhci_hcd.0: Device attached [ 331.104650][ T4302] vhci_hcd: vhci_device speed not set [ 331.175856][ T4302] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 331.604397][T10487] vhci_hcd: connection closed [ 331.605115][T10482] vhci_hcd: connection reset by peer [ 331.609332][T10489] vhci_hcd: connection closed [ 331.611032][T10485] vhci_hcd: connection closed [ 331.623076][T10479] vhci_hcd: stop threads [ 331.639598][T10479] vhci_hcd: release socket [ 331.647314][T10479] vhci_hcd: disconnect device [ 331.669354][T10479] vhci_hcd: stop threads [ 331.673817][T10479] vhci_hcd: release socket [ 331.678343][T10479] vhci_hcd: disconnect device [ 331.688336][T10479] vhci_hcd: stop threads [ 331.692929][T10479] vhci_hcd: release socket [ 331.697473][T10479] vhci_hcd: disconnect device [ 331.704160][T10479] vhci_hcd: stop threads [ 331.708458][T10479] vhci_hcd: release socket [ 331.713493][T10479] vhci_hcd: disconnect device [ 332.231758][T10477] netlink: 'syz.1.2587': attribute type 10 has an invalid length. [ 332.280147][T10477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.314174][T10477] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 332.333357][T10481] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.340833][T10481] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.038126][T10524] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 335.507366][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2615'. [ 335.531217][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2615'. [ 336.134874][T10567] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2618'. [ 336.332817][ T4302] vhci_hcd: vhci_device speed not set [ 336.598878][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2626'. [ 336.626203][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2626'. [ 337.756300][T10602] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2632'. [ 338.144832][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2639'. [ 338.174832][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2639'. [ 338.570498][ T4254] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 338.581577][ T4254] CPU: 0 PID: 4254 Comm: kworker/u5:2 Not tainted 6.1.117-syzkaller #0 [ 338.589876][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 338.599940][ T4254] Workqueue: hci4 hci_rx_work [ 338.604665][ T4254] Call Trace: [ 338.607959][ T4254] [ 338.610896][ T4254] dump_stack_lvl+0x1e3/0x2cb [ 338.615600][ T4254] ? nf_tcp_handle_invalid+0x642/0x642 [ 338.621063][ T4254] ? panic+0x764/0x764 [ 338.625151][ T4254] sysfs_create_dir_ns+0x2c6/0x390 [ 338.630273][ T4254] ? sysfs_warn_dup+0xa0/0xa0 [ 338.634973][ T4254] kobject_add_internal+0x6df/0xd10 [ 338.640191][ T4254] kobject_add+0x14e/0x210 [ 338.644709][ T4254] ? device_add+0x3c2/0xfd0 [ 338.649226][ T4254] ? kobject_init+0x1d0/0x1d0 [ 338.653925][ T4254] ? __raw_spin_lock_init+0x41/0x100 [ 338.659311][ T4254] ? get_device_parent+0x128/0x400 [ 338.664432][ T4254] device_add+0x476/0xfd0 [ 338.668773][ T4254] hci_conn_add_sysfs+0xe4/0x1f0 [ 338.673724][ T4254] le_conn_complete_evt+0xcc6/0x1320 [ 338.679024][ T4254] ? trace_contention_end+0x61/0x170 [ 338.684326][ T4254] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 338.690575][ T4254] ? __mutex_unlock_slowpath+0x218/0x750 [ 338.696324][ T4254] ? mutex_unlock+0x10/0x10 [ 338.700834][ T4254] ? skb_pull_data+0x10e/0x220 [ 338.705611][ T4254] hci_le_conn_complete_evt+0x188/0x410 [ 338.711172][ T4254] hci_event_packet+0xa40/0x1510 [ 338.716126][ T4254] ? hci_remote_host_features_evt+0x210/0x210 [ 338.722213][ T4254] ? bis_list+0x290/0x290 [ 338.726566][ T4254] ? do_raw_spin_unlock+0x137/0x8a0 [ 338.731775][ T4254] ? kcov_remote_start+0x4ae/0x7c0 [ 338.736901][ T4254] ? exc_page_fault+0x620/0x620 [ 338.741766][ T4254] ? hci_send_to_monitor+0x99/0x4d0 [ 338.746976][ T4254] hci_rx_work+0x3cd/0xce0 [ 338.751400][ T4254] ? do_raw_spin_unlock+0x137/0x8a0 [ 338.756611][ T4254] ? process_one_work+0x7a9/0x11d0 [ 338.761729][ T4254] process_one_work+0x8a9/0x11d0 [ 338.766690][ T4254] ? worker_detach_from_pool+0x260/0x260 [ 338.772338][ T4254] ? _raw_spin_lock_irqsave+0x120/0x120 [ 338.777898][ T4254] ? kthread_data+0x4e/0xc0 [ 338.782424][ T4254] ? wq_worker_running+0x97/0x190 [ 338.787454][ T4254] worker_thread+0xa47/0x1200 [ 338.792146][ T4254] ? release_firmware_map_entry+0x186/0x186 [ 338.798061][ T4254] kthread+0x28d/0x320 [ 338.802136][ T4254] ? worker_clr_flags+0x190/0x190 [ 338.807167][ T4254] ? kthread_blkcg+0xd0/0xd0 [ 338.811759][ T4254] ret_from_fork+0x1f/0x30 [ 338.816202][ T4254] [ 338.820205][ T4254] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 338.834504][ T4254] Bluetooth: hci4: failed to register connection device [ 339.685029][ T4258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.694761][ T4258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.704848][ T4258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.712762][ T4258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.733973][ T4258] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.749183][ T4258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.944953][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2651'. [ 340.959391][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 341.121036][T10643] chnl_net:caif_netlink_parms(): no params data found [ 341.543945][T10659] netlink: 'syz.0.2650': attribute type 10 has an invalid length. [ 341.596581][T10664] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 341.789017][T10659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.842534][ T4254] Bluetooth: hci0: command tx timeout [ 341.851746][T10659] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 342.117952][T10671] netlink: 'syz.2.2654': attribute type 39 has an invalid length. [ 342.382022][T10643] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.429865][T10643] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.451395][T10643] device bridge_slave_0 entered promiscuous mode [ 342.471839][T10643] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.479751][T10643] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.495499][T10643] device bridge_slave_1 entered promiscuous mode [ 342.614487][T10643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.922559][ T4254] Bluetooth: hci0: command tx timeout [ 344.502550][T10643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.606612][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.631713][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2663'. [ 344.655417][T10643] team0: Port device team_slave_0 added [ 344.669533][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 344.726878][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.759533][T10643] team0: Port device team_slave_1 added [ 344.774384][T10702] netlink: 'syz.2.2666': attribute type 39 has an invalid length. [ 344.831113][T10643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.840724][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.866710][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.900599][T10643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.940920][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.963253][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 345.045064][T10643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.052142][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.078080][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.202731][T10643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.015546][T10715] sp0: Synchronizing with TNC [ 346.183552][ T48] Bluetooth: hci0: command tx timeout [ 346.566335][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.634270][T10710] netlink: 'syz.3.2669': attribute type 10 has an invalid length. [ 346.781558][T10710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.791347][T10710] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 346.875484][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2676'. [ 346.889005][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'. [ 347.001276][T10643] device hsr_slave_0 entered promiscuous mode [ 347.019739][T10643] device hsr_slave_1 entered promiscuous mode [ 347.031029][T10643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.048787][T10643] Cannot create hsr debugfs directory [ 347.057029][T10736] netlink: 'syz.3.2677': attribute type 39 has an invalid length. [ 347.139690][T10739] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2678'. [ 347.322967][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2680'. [ 347.429106][ T68] tipc: Disabling bearer [ 347.446207][ T68] tipc: Left network mode [ 348.245647][ T48] Bluetooth: hci0: command tx timeout [ 348.637663][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 348.649754][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'. [ 349.510585][T10769] netlink: 'syz.1.2690': attribute type 39 has an invalid length. [ 349.669122][T10777] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 349.941627][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2697'. [ 349.968912][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 350.063422][T10643] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.074159][T10643] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.115040][T10643] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.131915][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 350.185779][T10643] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.375491][T10795] netlink: 'syz.0.2701': attribute type 39 has an invalid length. [ 350.407692][T10643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.459260][T10643] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.469995][T10660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.485291][T10660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.524477][T10660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.544122][T10660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.567046][T10660] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.575235][T10660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.642424][T10660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 350.672983][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 350.683926][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 350.693474][T10416] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.700600][T10416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.713041][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 350.722089][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.787083][ T68] device hsr_slave_0 left promiscuous mode [ 350.797613][ T68] device hsr_slave_1 left promiscuous mode [ 350.809529][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.822064][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.838980][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.847819][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.863763][ T68] device bridge_slave_1 left promiscuous mode [ 350.874342][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.886459][ T68] device bridge_slave_0 left promiscuous mode [ 350.898104][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.330045][ T68] device veth1_macvtap left promiscuous mode [ 351.338914][ T68] device veth0_macvtap left promiscuous mode [ 351.455720][ T68] device veth1_vlan left promiscuous mode [ 351.491418][ T68] device veth0_vlan left promiscuous mode [ 352.174508][ T68] team0 (unregistering): Port device team_slave_1 removed [ 352.300633][ T68] team0 (unregistering): Port device team_slave_0 removed [ 352.690889][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.831013][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.309351][ T68] bond0 (unregistering): Released all slaves [ 353.388967][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 353.398849][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.407783][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.416734][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.426003][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.435564][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.444502][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.456547][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.465657][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.501888][T10822] netlink: 'syz.1.2711': attribute type 39 has an invalid length. [ 353.531455][T10643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.726296][T10830] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2714'. [ 353.745139][T10830] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2714'. [ 353.758488][T10830] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2714'. [ 354.550645][T10843] bridge0: port 3(gretap0) entered blocking state [ 354.557850][T10843] bridge0: port 3(gretap0) entered disabled state [ 354.570281][T10843] device gretap0 entered promiscuous mode [ 354.577311][T10843] bridge0: port 3(gretap0) entered blocking state [ 354.584268][T10843] bridge0: port 3(gretap0) entered forwarding state [ 354.615365][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.623796][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 354.638397][T10643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.787288][T10852] serio: Serial port ptm0 [ 355.609440][T10866] netlink: 'syz.2.2723': attribute type 39 has an invalid length. [ 355.796161][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.817397][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.487264][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.517248][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.539575][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.575045][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 356.585492][ T48] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 356.592632][T10643] device veth0_vlan entered promiscuous mode [ 356.626419][T10643] device veth1_vlan entered promiscuous mode [ 356.693894][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 356.707198][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 356.720521][T10643] device veth0_macvtap entered promiscuous mode [ 356.739048][T10643] device veth1_macvtap entered promiscuous mode [ 356.773713][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.787184][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.800002][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.832656][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.842637][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.861845][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.880776][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.901727][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.929527][T10643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.020667][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 357.184794][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 357.198637][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 357.209104][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.239364][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.281068][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.310880][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.318446][T10893] misc userio: No port type given on /dev/userio [ 357.499592][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.509718][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.520302][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.530608][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.541232][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.558345][T10643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.682974][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.714215][T10892] misc userio: Invalid payload size [ 357.725925][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.753458][T10643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.774812][T10643] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.785890][T10643] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.795986][T10643] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.822141][T10901] netlink: 'syz.0.2736': attribute type 39 has an invalid length. [ 357.947507][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.960806][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.988590][T10416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 358.049532][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.066991][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.099854][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 358.771630][T10914] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2647'. [ 358.978883][T10926] bridge0: port 3(gretap0) entered blocking state [ 358.985620][T10926] bridge0: port 3(gretap0) entered disabled state [ 359.001564][T10926] device gretap0 entered promiscuous mode [ 359.032537][ T22] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 359.086929][T10931] netlink: 'syz.1.2748': attribute type 39 has an invalid length. [ 359.191528][T10936] tipc: Started in network mode [ 359.200401][T10936] tipc: Node identity ac1414aa, cluster identity 4711 [ 359.211436][T10936] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 359.224302][ T22] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 359.224629][T10936] tipc: Enabled bearer , priority 10 [ 359.243180][ T22] usb 4-1: config 0 has no interface number 0 [ 359.253083][ T22] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 359.266908][ T22] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 359.276325][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.284600][ T22] usb 4-1: Product: syz [ 359.289082][ T22] usb 4-1: Manufacturer: syz [ 359.296564][ T22] usb 4-1: SerialNumber: syz [ 359.313162][ T22] usb 4-1: config 0 descriptor?? [ 359.323637][T10916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.342582][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 359.352750][ T22] as10x_usb: device has been detected [ 359.358595][ T22] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 359.398564][ T22] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 359.482422][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 359.494873][ T22] as10x_usb: error during firmware upload part1 [ 359.507702][ T22] Registered device PCTV Systems picoStick (74e) [ 359.584021][ T22] usb 4-1: USB disconnect, device number 9 [ 359.606827][ T128] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 359.621205][ T22] Unregistered device PCTV Systems picoStick (74e) [ 359.622488][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 359.638249][ T22] as10x_usb: device has been disconnected [ 359.772678][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 359.822356][ T128] usb 3-1: Using ep0 maxpacket: 8 [ 359.829899][ T128] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.851921][ T128] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.865250][ T128] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.875808][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 359.875823][ T128] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.898129][ T128] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.911590][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.919851][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 360.010803][T10951] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2755'. [ 360.052491][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 360.145395][ T128] usb 3-1: GET_CAPABILITIES returned 0 [ 360.151002][ T128] usbtmc 3-1:16.0: can't read capabilities [ 360.192421][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 360.332416][ T128] tipc: Node number set to 2886997162 [ 360.472502][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 360.518736][ T128] usb 3-1: USB disconnect, device number 9 [ 360.644177][ T48] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 360.653686][ T48] Bluetooth: hci1: Injecting HCI hardware error event [ 360.664798][ T48] Bluetooth: hci1: hardware error 0x00 [ 360.742655][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 361.089554][T10968] bridge0: port 1(gretap0) entered blocking state [ 361.107476][T10968] bridge0: port 1(gretap0) entered disabled state [ 361.129664][T10968] device gretap0 entered promiscuous mode [ 361.382464][ T4300] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 361.575213][ T4300] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 361.592423][ T4300] usb 3-1: config 0 has no interface number 0 [ 361.616676][ T4300] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 361.648729][ T4300] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 361.698729][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.729286][ T4300] usb 3-1: Product: syz [ 361.739518][ T4300] usb 3-1: Manufacturer: syz [ 361.749735][ T4300] usb 3-1: SerialNumber: syz [ 361.766891][ T4300] usb 3-1: config 0 descriptor?? [ 361.783091][T10967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 361.801764][ T4300] as10x_usb: device has been detected [ 361.815021][ T4300] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 361.858406][ T4300] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 361.884493][ T4300] as10x_usb: error during firmware upload part1 [ 361.901565][ T4300] Registered device PCTV Systems picoStick (74e) [ 362.052120][ T4298] usb 3-1: USB disconnect, device number 10 [ 362.105867][ T4298] Unregistered device PCTV Systems picoStick (74e) [ 362.111485][ T4298] as10x_usb: device has been disconnected [ 362.263228][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2766'. [ 362.423126][T10985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2767'. [ 362.722462][ T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 364.370930][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2778'. [ 364.401125][T11015] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2779'. [ 364.412554][ C0] net_ratelimit: 3 callbacks suppressed [ 364.412571][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 365.013244][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 365.188257][ T22] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 365.378615][ T22] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 365.392582][ T22] usb 4-1: config 0 has no interface number 0 [ 365.409017][ T22] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 365.442398][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 365.453245][ T22] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 365.478549][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.498922][ T22] usb 4-1: Product: syz [ 365.503212][ T22] usb 4-1: Manufacturer: syz [ 365.507849][ T22] usb 4-1: SerialNumber: syz [ 365.544412][ T22] usb 4-1: config 0 descriptor?? [ 365.563687][T11028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 365.581402][ T22] as10x_usb: device has been detected [ 365.608427][ T22] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 365.686777][ T22] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 365.727239][T11052] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2791'. [ 365.731261][ T22] as10x_usb: error during firmware upload part1 [ 365.753432][ T22] Registered device PCTV Systems picoStick (74e) [ 365.796588][ T26] usb 4-1: USB disconnect, device number 10 [ 365.845500][ T26] Unregistered device PCTV Systems picoStick (74e) [ 365.851764][ T26] as10x_usb: device has been disconnected [ 366.482391][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.522417][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.744231][ T26] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 368.281594][T11079] capability: warning: `syz.2.2799' uses deprecated v2 capabilities in a way that may be insecure [ 368.562380][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 368.585550][T11086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2802'. [ 369.602399][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 369.847635][T11118] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2814'. [ 370.256706][ T26] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 370.265272][ T26] usb 1-1: can't read configurations, error -71 [ 370.642398][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 371.682421][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 372.118450][T11146] hpfs: bad mount options. [ 372.362874][T11144] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2822'. [ 372.722773][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 372.738068][T11153] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2826'. [ 373.762485][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 373.853805][T11190] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2840'. [ 374.802377][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 374.849226][T11218] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2851'. [ 375.011426][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 375.282420][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 375.329696][ T26] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 375.524344][ T26] usb 4-1: config 0 has no interface number 0 [ 375.555115][ T26] usb 4-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 375.602488][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.650491][ T26] usb 4-1: Product: syz [ 375.665211][ T26] usb 4-1: Manufacturer: syz [ 375.675351][ T26] usb 4-1: SerialNumber: syz [ 375.702056][ T26] usb 4-1: config 0 descriptor?? [ 375.842496][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 375.935263][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.962188][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.989312][ T26] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 376.019029][ T26] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 376.028969][ T26] dib0700: firmware download failed at 7 with -22 [ 376.038405][ T26] usb 4-1: USB disconnect, device number 11 [ 376.882370][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 377.069783][T11247] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 377.128797][T11247] kvm: pic: non byte write [ 377.242565][ T26] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 377.603567][ T26] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 377.611050][ T26] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 377.652333][ T26] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 377.669215][ T26] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 377.922395][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 378.380124][ T26] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 378.391391][ T26] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 378.434960][ T26] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 378.446316][ T26] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 378.482646][ T26] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 378.494171][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.500535][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.529934][ T26] usb 4-1: string descriptor 0 read error: -22 [ 378.536505][ T26] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 378.551271][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.576169][ T26] adutux 4-1:168.0: interrupt endpoints not found [ 378.972367][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 379.339399][ T128] usb 4-1: USB disconnect, device number 12 [ 380.002370][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 381.052452][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 381.352491][ T26] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 381.561454][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 381.569828][ T26] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 381.591260][ T26] usb 1-1: config 0 has no interface number 0 [ 381.634194][ T26] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 381.652492][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.671208][ T26] usb 1-1: Product: syz [ 381.682607][ T26] usb 1-1: Manufacturer: syz [ 381.687294][ T26] usb 1-1: SerialNumber: syz [ 381.694035][ T26] usb 1-1: config 0 descriptor?? [ 381.714330][ T26] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 381.999961][ T26] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 382.082378][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 382.082574][ T26] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 382.424589][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 382.425911][ T7] usb 1-1: USB disconnect, device number 14 [ 382.633418][ T7] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 382.662662][ T7] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 382.692822][ T7] quatech2 1-1:0.51: device disconnected [ 383.122480][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 384.015524][T11335] bridge0: port 3(gretap0) entered blocking state [ 384.028416][T11335] bridge0: port 3(gretap0) entered disabled state [ 384.041689][T11335] device gretap0 entered promiscuous mode [ 384.054122][T11335] bridge0: port 3(gretap0) entered blocking state [ 384.060808][T11335] bridge0: port 3(gretap0) entered forwarding state [ 384.172518][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 385.139707][T11352] ipt_CLUSTERIP: Please specify destination IP [ 385.202537][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 385.590026][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'. [ 386.242438][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 387.292639][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 388.303482][T11408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2920'. [ 388.323163][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 389.239788][ T128] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 389.362726][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 389.444304][ T4298] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 389.593042][ T128] usb 2-1: Using ep0 maxpacket: 32 [ 389.618850][ T128] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 389.655054][ T128] usb 2-1: config 0 has no interface number 0 [ 389.672568][ T4298] usb 5-1: device descriptor read/64, error -71 [ 389.762465][ T128] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 389.835441][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.875560][ T128] usb 2-1: Product: syz [ 390.167350][ T128] usb 2-1: Manufacturer: syz [ 390.172098][ T128] usb 2-1: SerialNumber: syz [ 390.193195][ T128] usb 2-1: config 0 descriptor?? [ 390.200612][ T128] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 390.232337][ T4298] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 390.382336][ T4298] usb 5-1: device descriptor read/64, error -71 [ 390.403400][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 390.417211][ T128] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 390.442522][ T128] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 390.512560][ T4298] usb usb5-port1: attempt power cycle [ 390.857483][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 390.968177][ T128] usb 2-1: USB disconnect, device number 9 [ 390.982734][ T128] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 391.005239][ T128] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 391.032916][ T128] quatech2 2-1:0.51: device disconnected [ 391.442459][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 392.067215][T11434] bridge0: port 3(gretap0) entered blocking state [ 392.080703][T11434] bridge0: port 3(gretap0) entered disabled state [ 392.105565][T11434] device gretap0 entered promiscuous mode [ 392.114189][T11434] bridge0: port 3(gretap0) entered blocking state [ 392.120804][T11434] bridge0: port 3(gretap0) entered forwarding state [ 392.482525][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 393.019807][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2937'. [ 393.412339][ T22] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 393.522484][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 393.608646][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 393.616700][ T22] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 393.634365][ T22] usb 5-1: config 0 has no interface number 0 [ 393.650752][ T22] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 393.675701][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.693916][ T22] usb 5-1: Product: syz [ 393.703601][ T22] usb 5-1: Manufacturer: syz [ 393.720677][ T22] usb 5-1: SerialNumber: syz [ 393.752691][ T22] usb 5-1: config 0 descriptor?? [ 393.771924][ T22] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 394.562480][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 394.761972][ T22] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 394.775604][ T22] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 394.996619][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 395.004859][ T26] usb 5-1: USB disconnect, device number 17 [ 395.025659][ T26] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 395.051942][ T26] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 395.071868][ T26] quatech2 5-1:0.51: device disconnected [ 395.082408][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 395.279820][ T22] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 395.297397][ T22] usb 2-1: config 0 has no interface number 0 [ 395.325902][ T22] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 395.339101][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.351446][ T22] usb 2-1: Product: syz [ 395.359958][ T22] usb 2-1: Manufacturer: syz [ 395.367173][ T22] usb 2-1: SerialNumber: syz [ 395.377775][ T22] usb 2-1: config 0 descriptor?? [ 395.391664][ T22] as10x_usb: device has been detected [ 395.401120][ T22] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 395.438614][ T22] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 395.458750][ T22] as10x_usb: error during firmware upload part1 [ 395.468721][ T22] Registered device PCTV Systems picoStick (74e) [ 395.601637][ T22] usb 2-1: USB disconnect, device number 10 [ 395.612387][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 395.639448][ T22] Unregistered device PCTV Systems picoStick (74e) [ 395.640830][ T22] as10x_usb: device has been disconnected [ 396.642369][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 397.692441][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 397.902423][ T4297] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 397.977633][T11541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2971'. [ 398.282607][ T128] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 398.387318][ T4258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.412605][ T4258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.420991][ T4258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.429778][ T4258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.439068][ T4258] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 398.452378][ T4258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.468973][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.480361][ T128] usb 3-1: device descriptor read/64, error -71 [ 398.483155][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.495368][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.503166][ T4297] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 398.511380][ T4297] usb 1-1: config 0 has no interface number 0 [ 398.517785][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.530403][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 398.538005][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.546096][ T4297] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 398.572917][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.580961][ T4297] usb 1-1: Product: syz [ 398.594218][ T4297] usb 1-1: Manufacturer: syz [ 398.598882][ T4297] usb 1-1: SerialNumber: syz [ 398.606783][ T4297] usb 1-1: config 0 descriptor?? [ 398.630869][ T4297] as10x_usb: device has been detected [ 398.636737][ T4297] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 398.682090][ T4297] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 398.702931][ T4297] as10x_usb: error during firmware upload part1 [ 398.709755][ T4297] Registered device PCTV Systems picoStick (74e) [ 398.722435][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 398.777423][ T128] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 398.826805][ T4297] usb 1-1: USB disconnect, device number 15 [ 398.849344][ T4297] Unregistered device PCTV Systems picoStick (74e) [ 398.856469][ T4297] as10x_usb: device has been disconnected [ 398.942726][ T128] usb 3-1: device descriptor read/64, error -71 [ 398.986958][T10479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.033509][T11549] chnl_net:caif_netlink_parms(): no params data found [ 399.072749][ T128] usb usb3-port1: attempt power cycle [ 399.280335][T10479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.326087][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.337546][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.345893][T11549] device bridge_slave_0 entered promiscuous mode [ 399.375541][T10479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.391876][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.399309][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.409922][T11549] device bridge_slave_1 entered promiscuous mode [ 399.446466][T10479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.509994][T11579] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2982'. [ 399.692473][ T128] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 399.753521][ T128] usb 3-1: device descriptor read/8, error -71 [ 399.772598][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 400.092536][ T128] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 400.127519][T11549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.146446][T11549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.147094][ T128] usb 3-1: device descriptor read/8, error -71 [ 400.237397][T11549] team0: Port device team_slave_0 added [ 400.264941][T11549] team0: Port device team_slave_1 added [ 400.298473][ T128] usb usb3-port1: unable to enumerate USB device [ 400.343811][T11549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.351242][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.384393][T11549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.419278][T11549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.453570][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.481576][T11549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.642631][ T48] Bluetooth: hci5: command tx timeout [ 400.682039][T11549] device hsr_slave_0 entered promiscuous mode [ 400.724956][T11549] device hsr_slave_1 entered promiscuous mode [ 400.763320][T11549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.799399][T11549] Cannot create hsr debugfs directory [ 400.805071][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 401.312472][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 401.602297][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.642481][ T7] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 401.651598][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.674732][ T7] usb 3-1: config 0 descriptor?? [ 401.842389][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 402.009686][T10479] device gretap0 left promiscuous mode [ 402.031833][T10479] bridge0: port 1(gretap0) entered disabled state [ 402.092196][ T7] hid-generic 0003:28DE:1205.0002: item fetching failed at offset 3/5 [ 402.123396][ T7] hid-generic: probe of 0003:28DE:1205.0002 failed with error -22 [ 402.299646][T11605] capability: warning: `syz.2.2994' uses 32-bit capabilities (legacy support in use) [ 402.329529][T11651] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3004'. [ 402.348110][ T26] usb 3-1: USB disconnect, device number 15 [ 402.723732][ T4258] Bluetooth: hci5: command tx timeout [ 402.882359][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 403.318079][T10479] device hsr_slave_0 left promiscuous mode [ 403.338417][T10479] device hsr_slave_1 left promiscuous mode [ 403.393055][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.408934][T10479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.447749][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.470468][T10479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.560948][T10479] device veth1_macvtap left promiscuous mode [ 403.576033][T10479] device veth0_macvtap left promiscuous mode [ 403.590355][T10479] device veth1_vlan left promiscuous mode [ 403.603188][T10479] device veth0_vlan left promiscuous mode [ 403.922383][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 404.799866][T11702] random: crng reseeded on system resumption [ 404.802599][ T4258] Bluetooth: hci5: command tx timeout [ 404.970659][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 406.002447][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 406.604733][T10479] team0 (unregistering): Port device team_slave_1 removed [ 406.690264][T10479] team0 (unregistering): Port device team_slave_0 removed [ 406.738049][T10479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.779635][T10479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.882355][ T4258] Bluetooth: hci5: command tx timeout [ 406.948082][T10479] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 407.046928][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 407.203500][T10479] bond0 (unregistering): Released all slaves [ 407.253938][T11687] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3015'. [ 407.332857][T11549] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.366119][T11549] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.390961][T11549] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.414532][T11549] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 407.692714][ T4298] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 407.893731][ T4298] usb 2-1: Using ep0 maxpacket: 16 [ 407.894019][T11549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.957612][ T4298] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 408.082487][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 408.138979][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.141045][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 408.147186][ T4298] usb 2-1: Product: syz [ 408.147207][ T4298] usb 2-1: Manufacturer: syz [ 408.147224][ T4298] usb 2-1: SerialNumber: syz [ 408.156374][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.177450][ T4298] usb 2-1: config 0 descriptor?? [ 408.185914][T11549] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.251155][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.281210][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.310448][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.317689][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.337590][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.373744][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.386793][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.406228][ T26] usb 2-1: USB disconnect, device number 11 [ 408.414550][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.421737][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.453704][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 408.471817][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 408.488255][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 408.497719][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 408.506896][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 408.543989][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 408.568879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 408.585779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.608672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.617591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.626510][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.638145][T11549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 409.122449][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 410.162473][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 410.358500][T11424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.369605][T11424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 410.386725][T11549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.450043][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 410.473403][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.496266][T11549] device veth0_vlan entered promiscuous mode [ 410.517771][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 410.531815][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 410.560540][T11549] device veth1_vlan entered promiscuous mode [ 410.590181][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 410.603889][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 410.620222][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 410.668900][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 410.690042][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 410.711614][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.744317][T11549] device veth0_macvtap entered promiscuous mode [ 410.764096][T11549] device veth1_macvtap entered promiscuous mode [ 410.795705][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.808333][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.819056][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.831429][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.847970][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.862662][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.873064][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.883945][ T4297] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 410.891614][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.931126][T11549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.944673][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.989279][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 411.040913][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 411.090122][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.093856][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.100353][ T4297] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 411.122509][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.148077][ T4297] usb 1-1: config 0 descriptor?? [ 411.212568][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 411.263271][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.411486][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.487000][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.561986][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.634164][ T4297] hid-generic 0003:28DE:1205.0003: item fetching failed at offset 3/5 [ 411.647183][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.648452][ T4297] hid-generic: probe of 0003:28DE:1205.0003 failed with error -22 [ 411.673174][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.683585][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.694290][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.727003][T11549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.792729][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 411.801534][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.839723][T11549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.849025][T11549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.859489][T11549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.869145][T11549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.890504][ T4298] usb 1-1: USB disconnect, device number 16 [ 412.059606][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.079013][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.099617][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 412.128966][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.146278][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.160364][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 412.242385][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 413.734983][T11838] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3062'. [ 413.769343][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 414.412590][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 414.581424][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.591386][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.594025][T10479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.612362][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 414.617780][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.619907][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.802482][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 414.805951][T11866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.865934][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.878266][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 414.887763][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.043690][ T4258] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.053809][ T4258] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.063224][ T4258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.076025][ T4258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.088149][ T4258] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 415.097590][ T4258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.212556][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.222691][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 415.231761][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.243584][ T7] usb 2-1: config 0 descriptor?? [ 415.259559][ T7] hub 2-1:0.0: USB hub found [ 415.272354][T11862] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3074'. [ 415.360607][T10479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.472062][ T7] hub 2-1:0.0: 1 port detected [ 415.498637][T10479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.617531][T10479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.842385][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 416.352805][ T7] hub 2-1:0.0: activate --> -90 [ 416.470958][T11860] chnl_net:caif_netlink_parms(): no params data found [ 416.522323][ T26] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 416.761158][ T128] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 416.768810][ T4298] usb 2-1: USB disconnect, device number 12 [ 416.785622][ T128] usb 2-1-port1: connect-debounce failed [ 416.819231][T11860] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.836774][T11860] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.879103][T11860] device bridge_slave_0 entered promiscuous mode [ 416.886214][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 416.897480][T11860] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.904755][T11860] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.913474][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.920683][T11860] device bridge_slave_1 entered promiscuous mode [ 416.923527][ T26] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 416.939460][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.960796][T11895] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3084'. [ 417.030093][ T26] usb 4-1: config 0 descriptor?? [ 417.655816][ T26] hid-generic 0003:28DE:1205.0004: item fetching failed at offset 3/5 [ 417.670080][ T26] hid-generic: probe of 0003:28DE:1205.0004 failed with error -22 [ 417.922399][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 417.966193][T11860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.245652][T11860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.326547][ T26] usb 4-1: USB disconnect, device number 13 [ 418.545925][T10479] bridge0: port 3(gretap0) entered disabled state [ 418.596609][T10479] device gretap0 left promiscuous mode [ 418.603162][T10479] bridge0: port 3(gretap0) entered disabled state [ 418.746006][T11860] team0: Port device team_slave_0 added [ 418.756061][T11860] team0: Port device team_slave_1 added [ 418.802687][ T4297] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 418.822838][T11860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.830310][T11860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.856649][T11860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.869371][T11860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.876650][T11860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.911203][T11860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.968310][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 419.009923][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.039383][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.071910][ T4297] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 419.094951][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.109042][ T4297] usb 3-1: config 0 descriptor?? [ 419.124230][T11924] 9pnet: p9_errstr2errno: server reported unknown error @ [ 419.174462][T11860] device hsr_slave_0 entered promiscuous mode [ 419.188575][T11860] device hsr_slave_1 entered promiscuous mode [ 419.385192][T10479] device hsr_slave_0 left promiscuous mode [ 419.391920][T10479] device hsr_slave_1 left promiscuous mode [ 419.406266][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.436983][T10479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.450169][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.462179][T10479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.478238][T10479] device bridge_slave_1 left promiscuous mode [ 419.486930][T10479] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.503140][T10479] device bridge_slave_0 left promiscuous mode [ 419.509403][T10479] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.558234][T10479] device veth1_macvtap left promiscuous mode [ 419.566720][T10479] device veth0_macvtap left promiscuous mode [ 419.577061][T10479] device veth1_vlan left promiscuous mode [ 419.586749][T10479] device veth0_vlan left promiscuous mode [ 419.651379][ T4297] kye 0003:0458:0153.0005: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 420.441285][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 420.496381][ T128] usb 3-1: USB disconnect, device number 16 [ 421.452408][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 421.815070][T11957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 422.488625][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 423.036553][T10479] team0 (unregistering): Port device team_slave_1 removed [ 423.110627][T10479] team0 (unregistering): Port device team_slave_0 removed [ 423.196362][T10479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.262500][T10479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.524732][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 423.830474][T10479] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 424.572594][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 425.320054][T10479] bond0 (unregistering): Released all slaves [ 425.602365][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 426.052379][ T4298] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 426.242409][ T4298] usb 3-1: Using ep0 maxpacket: 16 [ 426.263318][ T4298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.292652][ T4298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.313005][ T4298] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 426.322093][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.332287][ T4298] usb 3-1: config 0 descriptor?? [ 426.448010][T11860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.471977][T11860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.491160][T11860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 426.520525][T11860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 426.652384][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 426.698792][T11860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.769140][T11947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 426.775648][ T4298] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0006/input/input5 [ 426.778830][T11947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 426.807505][T11860] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.839031][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 426.854195][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 426.867181][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.874399][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.902954][ T4298] appleir 0003:05AC:8241.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 427.068694][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.136288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.352448][T12003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.439623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.624854][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.632030][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.682374][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 427.836974][ T2183] usb 3-1: USB disconnect, device number 17 [ 428.053340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.068489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.097470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.121892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.137811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.182720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.661459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.711634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 428.722492][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 428.743221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.781228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.805491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.822141][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.356340][ T2183] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 429.524799][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.539842][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 429.554001][T11860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.564592][ T2183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.598559][ T2183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.627661][ T2183] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 429.637012][ T2183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.669711][ T2183] usb 4-1: config 0 descriptor?? [ 429.716746][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 429.738598][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 429.762525][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 429.859797][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 429.876871][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.946636][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 429.989026][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.019873][T11860] device veth0_vlan entered promiscuous mode [ 430.059923][T11860] device veth1_vlan entered promiscuous mode [ 430.083696][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 430.104234][ T2183] kye 0003:0458:0153.0007: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0 [ 430.164721][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.185211][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.215920][T11860] device veth0_macvtap entered promiscuous mode [ 430.260462][T11860] device veth1_macvtap entered promiscuous mode [ 430.318943][ T4298] usb 4-1: USB disconnect, device number 14 [ 430.352654][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.370873][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.397687][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.408993][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.422708][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.462535][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.472542][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.489167][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.500745][T11860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.519358][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 430.528537][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.546162][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.555978][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.570946][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.588372][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.598798][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.615942][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.631101][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.652041][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.668382][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.680498][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.700853][T11860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.710389][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 430.755232][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 430.783363][T11860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.792135][T11860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.810138][T11860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.812400][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 430.819211][T11860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.102002][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.139577][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.367595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 431.681329][T12047] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3134'. [ 431.821466][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.842377][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 431.858740][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.875101][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 432.882513][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 433.147834][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.172462][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.181310][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.190022][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.197669][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 433.205152][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.344735][ T4280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.366724][T12070] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3140'. [ 433.412527][T11995] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 433.513666][ T4280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.534609][T12072] bridge0: port 3(gretap0) entered blocking state [ 433.541462][T12072] bridge0: port 3(gretap0) entered disabled state [ 433.549472][T12072] device gretap0 entered promiscuous mode [ 433.559853][T12072] bridge0: port 3(gretap0) entered blocking state [ 433.566397][T12072] bridge0: port 3(gretap0) entered forwarding state [ 433.602362][T11995] usb 1-1: Using ep0 maxpacket: 16 [ 433.609432][T11995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.611572][ T4280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.651030][T11995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.664343][T11995] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 433.673728][T11995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.697687][T11995] usb 1-1: config 0 descriptor?? [ 433.726383][ T4280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.922443][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 433.983651][ T4280] tipc: Disabling bearer [ 434.019052][ T4280] tipc: Left network mode [ 434.083723][T12081] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3144'. [ 434.123111][T11995] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0008/input/input6 [ 434.261317][T11995] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 434.266936][T12065] chnl_net:caif_netlink_parms(): no params data found [ 434.954325][T12065] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.961542][T12065] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.970103][T12065] device bridge_slave_0 entered promiscuous mode [ 435.007852][T12065] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.015446][T12065] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.025881][T12065] device bridge_slave_1 entered promiscuous mode [ 435.080077][T12065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.096497][T12065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.178230][T12065] team0: Port device team_slave_0 added [ 435.199706][T12065] team0: Port device team_slave_1 added [ 435.286292][ T4258] Bluetooth: hci2: command tx timeout [ 435.301391][T12065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.308510][T12065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.337288][T12065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.376837][T12065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.384105][T12065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.439120][T12065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.127111][T11995] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 436.382133][ T4280] device gretap0 left promiscuous mode [ 436.408152][ T4280] bridge0: port 3(gretap0) entered disabled state [ 436.435185][T12065] device hsr_slave_0 entered promiscuous mode [ 436.463184][T12065] device hsr_slave_1 entered promiscuous mode [ 436.482345][T12065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.489994][T12065] Cannot create hsr debugfs directory [ 436.533517][T12114] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3154'. [ 437.018809][ T4299] usb 1-1: USB disconnect, device number 17 [ 437.162691][ T4280] device hsr_slave_0 left promiscuous mode [ 437.182873][ T4280] device hsr_slave_1 left promiscuous mode [ 437.206197][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.237400][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.266488][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.290400][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.316399][ T4280] device bridge_slave_1 left promiscuous mode [ 437.337322][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.356219][ T4280] device bridge_slave_0 left promiscuous mode [ 437.362988][ T4258] Bluetooth: hci2: command tx timeout [ 437.370776][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.417509][ T4280] device veth1_macvtap left promiscuous mode [ 437.424227][ T4280] device veth0_macvtap left promiscuous mode [ 437.430819][ T4280] device veth1_vlan left promiscuous mode [ 437.438466][ T4280] device veth0_vlan left promiscuous mode [ 439.037084][T12138] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3161'. [ 439.442527][ T4258] Bluetooth: hci2: command tx timeout [ 439.618781][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 439.676691][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 439.801552][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.925255][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.931755][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.932030][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.698734][ T4280] bond0 (unregistering): Released all slaves [ 441.522410][ T4258] Bluetooth: hci2: command tx timeout [ 441.977240][T12065] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 442.008216][T12065] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.046822][T12065] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.070777][T12065] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 443.311359][T12065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.370466][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 443.401362][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.434333][T12065] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.465957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 443.481307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.498322][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.505484][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.541357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 443.560212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 443.579686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.595586][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.602773][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.618293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 443.636045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 443.649922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 443.674913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 443.688995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 443.706390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 443.729281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 443.741863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 443.758742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 443.773273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 443.786731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.799948][T12065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 444.210532][T12187] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3174'. [ 444.270380][T11424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 444.292746][T11424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 444.338804][T12065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.381688][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 444.410154][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 444.443928][T12193] bridge0: port 3(gretap0) entered blocking state [ 444.455411][T12193] bridge0: port 3(gretap0) entered disabled state [ 444.476612][T12193] device gretap0 entered promiscuous mode [ 444.494087][T12193] bridge0: port 3(gretap0) entered blocking state [ 444.500610][T12193] bridge0: port 3(gretap0) entered forwarding state [ 444.636089][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 444.672653][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 444.883439][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 444.967084][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 445.062888][T12065] device veth0_vlan entered promiscuous mode [ 445.203786][T12065] device veth1_vlan entered promiscuous mode [ 445.275909][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 445.298982][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 445.355530][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 445.373833][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 445.396594][T12065] device veth0_macvtap entered promiscuous mode [ 445.430062][T12065] device veth1_macvtap entered promiscuous mode [ 445.769146][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.779732][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.795676][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.016345][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.055712][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.079289][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.130000][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.156196][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.180783][T12065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.196427][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.216294][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.236252][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.258065][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.278481][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.289316][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.319767][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.371294][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.425983][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.472977][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.510435][T12065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.533376][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.545796][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 446.655613][T12065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.743584][T12065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.780197][T12065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.803639][T12065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.852764][T12225] overlayfs: missing 'workdir' [ 447.795194][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.824587][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.870900][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.873372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 447.901484][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.936835][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 451.497483][ T4254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 451.508156][ T4254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 451.517186][ T4254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 451.547883][ T4254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 451.555677][ T4254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 451.564674][ T4254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.422589][T12286] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.3209'. [ 452.913010][T12271] chnl_net:caif_netlink_parms(): no params data found [ 453.602643][ T4254] Bluetooth: hci3: command tx timeout [ 453.739753][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 453.855591][T12271] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.863299][T12271] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.943938][ T7] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 453.964836][T12271] device bridge_slave_0 entered promiscuous mode [ 453.964859][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.343914][T12271] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.372663][T12271] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.399202][ T7] usb 3-1: config 0 descriptor?? [ 454.419293][T12271] device bridge_slave_1 entered promiscuous mode [ 454.437616][ T7] cp210x 3-1:0.0: cp210x converter detected [ 454.557123][T11947] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.523358][ T7] usb 3-1: cp210x converter now attached to ttyUSB0 [ 455.607750][T11947] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.660046][T12271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.682332][ T4254] Bluetooth: hci3: command tx timeout [ 455.703875][T12271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.729283][ T7] usb 3-1: USB disconnect, device number 18 [ 455.774066][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 455.837916][ T7] cp210x 3-1:0.0: device disconnected [ 456.058373][T11947] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.456632][T11947] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.517027][T12271] team0: Port device team_slave_0 added [ 456.534948][T12271] team0: Port device team_slave_1 added [ 456.566272][T12271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.589210][T12271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.659674][T12271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.710511][T12271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.738839][T12271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.780418][T12271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.634400][T12271] device hsr_slave_0 entered promiscuous mode [ 457.682837][T12271] device hsr_slave_1 entered promiscuous mode [ 457.726652][T12271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.741121][T12271] Cannot create hsr debugfs directory [ 457.762416][ T4254] Bluetooth: hci3: command tx timeout [ 458.892535][ T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 459.144952][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 459.181539][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 459.196467][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 459.210596][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 459.233971][ T7] usb 1-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 459.243161][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.252864][ T7] usb 1-1: Product: syz [ 459.257075][ T7] usb 1-1: Manufacturer: syz [ 459.261694][ T7] usb 1-1: SerialNumber: syz [ 459.283303][ T7] usb 1-1: config 0 descriptor?? [ 459.307713][ T7] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 459.330606][ T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 459.842451][ T4254] Bluetooth: hci3: command tx timeout [ 459.978171][T12374] bridge0: port 3(gretap0) entered blocking state [ 460.001795][T12374] bridge0: port 3(gretap0) entered disabled state [ 460.024207][T12374] device gretap0 entered promiscuous mode [ 460.031991][T12374] bridge0: port 3(gretap0) entered blocking state [ 460.038512][T12374] bridge0: port 3(gretap0) entered forwarding state [ 460.201422][T12381] netlink: 5312 bytes leftover after parsing attributes in process `syz.2.3242'. [ 460.214922][T11947] bridge0: port 3(gretap0) entered disabled state [ 460.237380][T11947] device gretap0 left promiscuous mode [ 460.250544][T11947] bridge0: port 3(gretap0) entered disabled state [ 460.736221][ T4298] usb 1-1: USB disconnect, device number 18 [ 460.796742][ T4298] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 461.834407][T12401] tmpfs: Unknown parameter ' ' [ 462.254875][T11947] device hsr_slave_0 left promiscuous mode [ 462.274850][T11947] device hsr_slave_1 left promiscuous mode [ 462.284978][T12391] fuse: Unknown parameter 'roxtmode' [ 462.312131][T11947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.332905][T11947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.349917][T11947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.369885][T11947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.379928][T11947] device bridge_slave_1 left promiscuous mode [ 462.390922][T11947] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.399990][T11947] device bridge_slave_0 left promiscuous mode [ 462.410457][T11947] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.437726][T11947] device veth1_macvtap left promiscuous mode [ 462.443959][T11947] device veth0_macvtap left promiscuous mode [ 462.450044][T11947] device veth1_vlan left promiscuous mode [ 462.456003][T11947] device veth0_vlan left promiscuous mode [ 463.011429][T11947] team0 (unregistering): Port device team_slave_1 removed [ 463.056448][T11947] team0 (unregistering): Port device team_slave_0 removed [ 463.097659][T11947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.142784][T11947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.307118][T11947] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 463.461828][T11947] bond0 (unregistering): Released all slaves [ 463.572273][T12271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 463.581155][T12271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 463.591565][T12271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 463.602542][T12271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 463.728648][T12271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.746140][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.755614][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.768985][T12271] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.780343][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.790687][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.820244][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.827431][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.899284][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 463.914491][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.937073][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.949899][T10717] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.957284][T10717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.995479][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.074767][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 464.145354][ T14] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 464.150142][ T4298] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 464.352564][ T4298] usb 4-1: Using ep0 maxpacket: 8 [ 464.461423][ T4298] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 464.511924][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 464.533264][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.544691][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.553035][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 464.560043][ T14] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 464.581901][ T14] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 464.587169][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.593830][ T4298] usb 4-1: Product: syz [ 464.605403][ T4298] usb 4-1: Manufacturer: syz [ 464.610140][ T14] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 464.611094][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.621152][ T4298] usb 4-1: SerialNumber: syz [ 464.636098][ T4298] usb 4-1: config 0 descriptor?? [ 464.647673][ T14] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 464.655720][ T14] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 464.666859][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.672748][ T14] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 464.697298][ T14] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 464.708657][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 464.717614][ T14] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 464.730247][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.738261][ T14] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 464.758626][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.767438][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.784014][T12271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.799944][ T14] usb 3-1: string descriptor 0 read error: -22 [ 464.816087][ T14] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 464.825872][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.616051][ T4298] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 465.633794][ T14] adutux 3-1:168.0: interrupt endpoints not found [ 465.787898][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 465.796015][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.814171][T12271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.835301][ T4300] usb 3-1: USB disconnect, device number 19 [ 465.851807][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.860925][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 465.882411][ T4311] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 465.886385][T12271] device veth0_vlan entered promiscuous mode [ 465.901638][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 465.911735][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.921892][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.934158][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.949093][T12271] device veth1_vlan entered promiscuous mode [ 465.975514][T11947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 465.984545][T11947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 465.994187][T11947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 466.002965][T11947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.015441][T12271] device veth0_macvtap entered promiscuous mode [ 466.028734][T12271] device veth1_macvtap entered promiscuous mode [ 466.051438][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.069283][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.076314][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 466.082837][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.092484][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 466.110034][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.112587][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 466.125719][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.131167][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 466.148087][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.163257][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.174792][ T4311] usb 5-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 466.175140][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.184094][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.201825][T12271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.202541][ T4311] usb 5-1: Product: syz [ 466.217729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 466.217891][ T4311] usb 5-1: Manufacturer: syz [ 466.230588][ T4311] usb 5-1: SerialNumber: syz [ 466.233776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 466.238708][ T4311] usb 5-1: config 0 descriptor?? [ 466.243721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 466.252422][ T4311] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 466.264013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 466.267421][ T4311] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 466.298647][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.309546][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.320308][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.331399][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.341576][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.352050][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.361919][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.372480][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.384107][T12271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.392729][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 466.410052][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 466.431984][T12271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.490288][T12271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.500919][T12271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.528353][T12271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.467395][T10658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.478398][T10658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.530456][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 467.563589][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.578686][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.591758][ T4298] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 467.594379][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 467.602785][T12435] block nbd2: NBD_DISCONNECT [ 467.613118][T12435] block nbd2: Send disconnect failed -22 [ 467.621038][ T4298] usb 4-1: USB disconnect, device number 15 [ 467.635475][T12434] block nbd2: Disconnected due to user request. [ 467.642604][T12434] block nbd2: shutting down sockets [ 467.843976][T11995] usb 5-1: USB disconnect, device number 18 [ 467.851386][T11995] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 467.988459][T12439] kernel profiling enabled (shift: 17) [ 468.872291][ T2183] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 468.928590][ T4298] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 469.074286][ T2183] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 469.087547][ T2183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.102001][ T2183] usb 1-1: config 0 descriptor?? [ 469.113455][ T2183] cp210x 1-1:0.0: cp210x converter detected [ 469.126260][ T4298] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 469.135749][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.146262][ T4298] usb 4-1: Product: syz [ 469.150462][ T4298] usb 4-1: Manufacturer: syz [ 469.159474][ T4298] usb 4-1: SerialNumber: syz [ 469.169734][ T4298] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 469.266103][ T4298] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.485316][T12458] tmpfs: Unknown parameter 'usrquota' [ 469.735467][ T2183] usb 1-1: cp210x converter now attached to ttyUSB0 [ 469.805331][ T4302] usb 4-1: USB disconnect, device number 16 [ 470.580792][ T4298] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 470.590477][ T4298] ath9k_htc: Failed to initialize the device [ 470.600611][ T4302] usb 4-1: ath9k_htc: USB layer deinitialized [ 470.633127][ T14] usb 1-1: USB disconnect, device number 19 [ 470.651619][ T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 470.660534][ T14] cp210x 1-1:0.0: device disconnected [ 472.977232][ T4254] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 473.019666][ T4254] Bluetooth: hci2: Injecting HCI hardware error event [ 473.027999][ T4258] Bluetooth: hci2: hardware error 0x00 [ 473.987023][T12504] block nbd2: NBD_DISCONNECT [ 474.272309][ T22] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 474.494943][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 474.530152][ T22] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 474.649208][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.752497][ T22] usb 5-1: Product: syz [ 474.804012][ T22] usb 5-1: Manufacturer: syz [ 474.863799][ T22] usb 5-1: SerialNumber: syz [ 474.981571][ T22] usb 5-1: config 0 descriptor?? [ 475.124221][ T4258] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 475.264494][ T22] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 475.493474][T12524] tmpfs: Unknown parameter 'usrquota' [ 475.543156][T12526] netlink: 'syz.2.3288': attribute type 6 has an invalid length. [ 475.699819][ T2183] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 476.694042][ T2183] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 476.712264][ T2183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.732894][ T2183] usb 4-1: config 0 descriptor?? [ 476.743885][ T2183] cp210x 4-1:0.0: cp210x converter detected [ 477.548420][ T22] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 477.568165][ T22] usb 5-1: USB disconnect, device number 19 [ 477.663077][ T2183] usb 4-1: cp210x converter now attached to ttyUSB0 [ 477.894438][ T22] usb 4-1: USB disconnect, device number 17 [ 478.793105][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 478.812159][ T22] cp210x 4-1:0.0: device disconnected [ 480.446704][T12570] tmpfs: Unknown parameter 'usrquota' [ 480.513297][T12573] block nbd3: NBD_DISCONNECT [ 481.722452][ T22] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 481.942429][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 481.960818][ T22] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 482.071087][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.169309][ T22] usb 1-1: Product: syz [ 482.229127][ T22] usb 1-1: Manufacturer: syz [ 482.285902][ T22] usb 1-1: SerialNumber: syz [ 482.398248][ T22] usb 1-1: config 0 descriptor?? [ 482.670635][ T22] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 484.001942][T12616] tmpfs: Unknown parameter 'usrquota' [ 484.214715][ T22] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 484.224309][ T22] usb 1-1: USB disconnect, device number 20 [ 484.673310][ T4254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 484.712052][ T4254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 484.758276][ T4254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.778198][ T4254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.791468][ T4254] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 484.806848][ T4254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.594941][T12595] ------------[ cut here ]------------ [ 486.600808][T12595] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 486.611162][T12595] WARNING: CPU: 0 PID: 12595 at fs/sysfs/group.c:280 sysfs_remove_group+0x179/0x2a0 [ 486.620816][T12595] Modules linked in: [ 486.624836][T12595] CPU: 0 PID: 12595 Comm: kbnepd bnep0 Not tainted 6.1.117-syzkaller #0 [ 486.633243][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 486.643885][T12595] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 486.649739][T12595] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 7a a4 c7 ff 49 8b 14 24 48 c7 c7 a0 72 1c 8b 4c 89 f6 e8 07 36 38 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 1b 70 ff [ 486.669446][T12595] RSP: 0018:ffffc90004ef7910 EFLAGS: 00010246 [ 486.675594][T12595] RAX: 2d7e65f5cbf3e600 RBX: ffff88802d33a850 RCX: ffff88802e631dc0 [ 486.683651][T12595] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 486.691671][T12595] RBP: dffffc0000000000 R08: ffffffff8152a88e R09: fffff520009dee81 [ 486.699727][T12595] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802d33a820 [ 486.707780][T12595] R13: 1ffffffff180f55c R14: ffffffff8c07b220 R15: ffff88805b46e488 [ 486.715831][T12595] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 486.724846][T12595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.731460][T12595] CR2: 00007f91233ca897 CR3: 000000005ddac000 CR4: 00000000003526f0 [ 486.739574][T12595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 486.747642][T12595] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 486.755700][T12595] Call Trace: [ 486.759028][T12595] [ 486.761985][T12595] ? __warn+0x15a/0x520 [ 486.766227][T12595] ? sysfs_remove_group+0x179/0x2a0 [ 486.771556][T12595] ? report_bug+0x2af/0x500 [ 486.776143][T12595] ? sysfs_remove_group+0x179/0x2a0 [ 486.781378][T12595] ? handle_bug+0x3d/0x70 [ 486.785777][T12595] ? exc_invalid_op+0x16/0x40 [ 486.790491][T12595] ? asm_exc_invalid_op+0x16/0x20 [ 486.795619][T12595] ? __warn_printk+0x28e/0x350 [ 486.800421][T12595] ? sysfs_remove_group+0x179/0x2a0 [ 486.805700][T12595] netdev_queue_update_kobjects+0x3ce/0x480 [ 486.811653][T12595] netdev_unregister_kobject+0x10d/0x250 [ 486.817411][T12595] unregister_netdevice_many+0x12bf/0x17a0 [ 486.823336][T12595] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 486.828417][T12595] ? mutex_lock_nested+0x10/0x10 [ 486.833441][T12595] ? read_lock_is_recursive+0x10/0x10 [ 486.838867][T12595] unregister_netdev+0x19b/0x210 [ 486.843897][T12595] ? clear_nonspinnable+0x60/0x60 [ 486.848969][T12595] ? unlist_netdevice+0x7f0/0x7f0 [ 486.854101][T12595] bnep_session+0x2db9/0x2fa0 [ 486.858869][T12595] ? bnep_add_connection+0xd80/0xd80 [ 486.864245][T12595] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 486.870178][T12595] ? _raw_spin_unlock+0x40/0x40 [ 486.875105][T12595] ? release_firmware_map_entry+0x186/0x186 [ 486.881032][T12595] ? wait_woken+0x1d0/0x1d0 [ 486.885633][T12595] ? _raw_spin_unlock+0x40/0x40 [ 486.890557][T12595] ? __kthread_parkme+0x168/0x1c0 [ 486.895685][T12595] kthread+0x28d/0x320 [ 486.899784][T12595] ? bnep_add_connection+0xd80/0xd80 [ 486.905168][T12595] ? kthread_blkcg+0xd0/0xd0 [ 486.909789][T12595] ret_from_fork+0x1f/0x30 [ 486.914298][T12595] [ 486.917337][T12595] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 486.924651][T12595] CPU: 0 PID: 12595 Comm: kbnepd bnep0 Not tainted 6.1.117-syzkaller #0 [ 486.932989][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 486.943064][T12595] Call Trace: [ 486.946353][T12595] [ 486.949296][T12595] dump_stack_lvl+0x1e3/0x2cb [ 486.953974][T12595] ? nf_tcp_handle_invalid+0x642/0x642 [ 486.959430][T12595] ? panic+0x764/0x764 [ 486.963505][T12595] ? vscnprintf+0x59/0x80 [ 486.967834][T12595] panic+0x318/0x764 [ 486.971723][T12595] ? __warn+0x169/0x520 [ 486.975878][T12595] ? memcpy_page_flushcache+0xfc/0xfc [ 486.981252][T12595] ? ret_from_fork+0x1f/0x30 [ 486.985844][T12595] __warn+0x348/0x520 [ 486.989820][T12595] ? sysfs_remove_group+0x179/0x2a0 [ 486.995012][T12595] report_bug+0x2af/0x500 [ 486.999361][T12595] ? sysfs_remove_group+0x179/0x2a0 [ 487.004560][T12595] handle_bug+0x3d/0x70 [ 487.008722][T12595] exc_invalid_op+0x16/0x40 [ 487.013252][T12595] asm_exc_invalid_op+0x16/0x20 [ 487.018131][T12595] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 487.023952][T12595] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 7a a4 c7 ff 49 8b 14 24 48 c7 c7 a0 72 1c 8b 4c 89 f6 e8 07 36 38 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 1b 70 ff [ 487.043562][T12595] RSP: 0018:ffffc90004ef7910 EFLAGS: 00010246 [ 487.049632][T12595] RAX: 2d7e65f5cbf3e600 RBX: ffff88802d33a850 RCX: ffff88802e631dc0 [ 487.057623][T12595] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 487.065584][T12595] RBP: dffffc0000000000 R08: ffffffff8152a88e R09: fffff520009dee81 [ 487.073552][T12595] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802d33a820 [ 487.081542][T12595] R13: 1ffffffff180f55c R14: ffffffff8c07b220 R15: ffff88805b46e488 [ 487.089525][T12595] ? __warn_printk+0x28e/0x350 [ 487.094297][T12595] netdev_queue_update_kobjects+0x3ce/0x480 [ 487.100200][T12595] netdev_unregister_kobject+0x10d/0x250 [ 487.105866][T12595] unregister_netdevice_many+0x12bf/0x17a0 [ 487.111682][T12595] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 487.116706][T12595] ? mutex_lock_nested+0x10/0x10 [ 487.121654][T12595] ? read_lock_is_recursive+0x10/0x10 [ 487.127035][T12595] unregister_netdev+0x19b/0x210 [ 487.131977][T12595] ? clear_nonspinnable+0x60/0x60 [ 487.137037][T12595] ? unlist_netdevice+0x7f0/0x7f0 [ 487.142092][T12595] bnep_session+0x2db9/0x2fa0 [ 487.146797][T12595] ? bnep_add_connection+0xd80/0xd80 [ 487.152086][T12595] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 487.157979][T12595] ? _raw_spin_unlock+0x40/0x40 [ 487.162849][T12595] ? release_firmware_map_entry+0x186/0x186 [ 487.168737][T12595] ? wait_woken+0x1d0/0x1d0 [ 487.173252][T12595] ? _raw_spin_unlock+0x40/0x40 [ 487.178122][T12595] ? __kthread_parkme+0x168/0x1c0 [ 487.183155][T12595] kthread+0x28d/0x320 [ 487.187215][T12595] ? bnep_add_connection+0xd80/0xd80 [ 487.192499][T12595] ? kthread_blkcg+0xd0/0xd0 [ 487.197080][T12595] ret_from_fork+0x1f/0x30 [ 487.201505][T12595] [ 487.204935][T12595] Kernel Offset: disabled [ 487.209432][T12595] Rebooting in 86400 seconds..